Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: ayU2+I/dzHv7MGg/HUupHAhmYa9+XGjxaQPST4dnsdw=
Subject key identifier: 46:75:9E:D3:AE:E2:20:AC:BF:89:17:9F:8E:BD:AB:4D:E4:BB:ED:A8
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 01965D9608ACFD4E41892AC8764CD75ED76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 14FE
Signing time: Tue 22 Apr 2025 13:00:35 +0000
Manifest this update: Tue 22 Apr 2025 13:00:35 +0000
Manifest next update: Wed 23 Apr 2025 13:00:35 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: COKewK1PrMOnxTxEg7PY5HjFbfyTde+DII+MsdB/8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:08:ac:fd:4e:41:89:2a:c8:76:4c:d7:5e:d7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: Apr 22 13:00:35 2025 GMT
Not After : Apr 23 13:00:35 2025 GMT
Subject: CN=46759ed3aee220acbf89179f8ebdab4de4bbeda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:e3:cf:57:97:1c:09:3b:83:9c:2b:3e:88:
c4:5c:74:aa:54:fd:21:f8:87:2b:88:e8:fd:ba:1d:
4e:4c:c4:76:7a:0e:6c:6b:28:b2:e3:06:6d:6e:81:
cc:57:db:e8:48:6c:35:98:59:dc:81:04:e4:ac:77:
c9:9c:c3:fd:a1:8b:1b:3f:03:bb:eb:78:cb:2a:fb:
63:9b:bd:89:eb:62:6a:0e:ad:be:7e:da:88:b1:41:
ca:bc:5c:cc:e2:68:e1:26:13:99:45:22:c3:52:d6:
b0:ba:e4:a6:e7:69:03:62:77:01:a3:84:2e:6c:7c:
6b:cf:8e:37:df:64:a1:c5:b2:7e:43:00:f4:a4:58:
43:1d:0b:97:f2:80:98:8c:1e:55:9b:09:dc:6c:68:
c1:ff:d7:c7:fa:ad:65:b6:c1:6b:7e:92:f3:7b:27:
36:32:04:8c:76:1e:5d:9b:0b:da:8f:1a:f0:78:6b:
66:fe:ae:40:74:27:98:0d:d1:23:91:e3:dc:70:67:
97:ae:de:a6:33:f2:70:4a:85:60:17:78:fa:9e:22:
d3:8c:96:fc:ed:e4:b5:89:1c:3f:e0:c6:1c:10:0b:
34:3b:e2:58:2d:83:df:15:0d:75:8d:ff:d2:89:cc:
83:b1:62:8d:a1:6e:9b:f0:28:7d:0e:6f:5d:d2:75:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:75:9E:D3:AE:E2:20:AC:BF:89:17:9F:8E:BD:AB:4D:E4:BB:ED:A8
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9e:86:12:d6:dc:1e:99:26:1b:28:24:0b:bb:d9:cb:45:b3:
8b:82:14:f8:df:fc:4d:b8:22:cc:fd:f6:d9:69:1a:8f:f6:7f:
eb:0d:e3:1f:fd:eb:8b:72:52:37:8f:4d:df:62:c5:88:9c:9b:
32:2e:81:3c:65:79:4e:b7:b3:7e:36:dd:e2:8d:75:cd:3c:a1:
78:63:ea:73:f6:74:39:0d:32:bf:55:05:6b:05:34:2c:1e:63:
6e:dd:3e:44:d7:de:04:5c:05:3e:85:e8:49:3d:00:43:af:76:
9a:fd:8e:a8:66:29:f5:90:88:b8:3e:d5:8c:0b:31:95:2b:fa:
bb:d2:bd:55:31:f6:29:f2:f4:90:5c:e8:29:45:49:74:b4:ac:
51:4d:77:8d:61:0a:36:06:a1:39:a7:55:6e:52:3e:cc:71:cf:
a8:dd:c6:5f:ad:f8:ab:74:2f:81:c3:36:d6:84:b9:67:e6:37:
22:b6:69:5f:8c:b1:0a:63:e4:d7:15:24:09:4e:88:d3:96:4f:
62:f3:3f:47:f4:64:b3:41:48:c7:1e:d9:60:57:90:fc:7c:df:
06:64:ef:9d:cf:7f:e6:1c:16:a3:b2:86:21:aa:20:03:29:0f:
84:5e:5c:56:12:96:14:8e:44:42:16:2c:84:82:1d:d3:54:5f:
09:76:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:25 2025 by rpki-client